Lucene search
RedhatCVELIST:CVE-2013-2100HistorySep 29, 2014 - 10:00 p.m.
CVE-2013-2100
2014-09-2922:00:00
redhat
www.cve.org
The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certificate.
Related
cve
cve
CVE-2013-2100
2014-09-29 22:55:07
nessus
nessus
GLSA-201507-16 : Portage: Man-in-the-middle attack
2015-09-23 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201507-16
2015-09-29 00:00:00
prion
prion
Design/Logic Flaw
2014-09-29 22:55:00
nvd
nvd
CVE-2013-2100
2014-09-29 22:55:07
gentoo
gentoo
Portage: Man-in-the-middle attack
2015-07-10 00:00:00